de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65

Analysis

max time kernel
136s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 12:55

Target

de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe
Size

524KB
MD5

87cdf1f50466e49c24f794d4eddae7c4
SHA1

027edd0046cb2cb075517c0ded8106c591e98c09
SHA256

de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65
SHA512

67ff7f5e4e118006c82d519e410a0df5ebcbd50e66e11cb51e8542e6fa5c286e46260b61e73ed70d6b79d39d78ea92e982385f9ce7e2925d19a3263d9d865731
SSDEEP

12288:CsbcTyNadO9LE5xgVLB8JVzvBVKXCuapzDBGoM:CsbcEadO9LEXgFoVzvSXCXD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe

description	pid	process	target process
PID 1184 wrote to memory of 2604	1184	de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe	de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe
PID 1184 wrote to memory of 2604	1184	de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe	de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe
PID 1184 wrote to memory of 2604	1184	de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe	de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe

C:\Users\Admin\AppData\Local\Temp\de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe
"C:\Users\Admin\AppData\Local\Temp\de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1184

C:\Users\Admin\AppData\Local\Temp\de04e11039193189a697f3728c89774cd4d7e1d451e7a9ba418af5cdeac71b65.exe
tear
2⤵
PID:2604

memory/1184-132-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/1184-134-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2604-133-0x0000000000000000-mapping.dmp

Download
memory/2604-135-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download
memory/2604-136-0x0000000000400000-0x000000000048E000-memory.dmp

Filesize
568KB

Download